Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
File: pmnxwhNwxE39EOKvaIyMTg6hKVU.mft (raw, json)
Hash identifier: c1JQhJPFeRgp5sEkcr3pGu+g2XyRO/m+nIdZQg0FpNI=
Subject key identifier: 0E:6A:9D:A9:00:E8:55:C0:3C:27:D7:61:E9:40:C8:AA:72:31:B5:B8
Authority key identifier: A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55
Certificate issuer: /CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
Certificate serial: 019A71EEC16F3CDD6971F513D13E55A43880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
Manifest number: 0F67
Signing time: Tue 11 Nov 2025 08:01:03 +0000
Manifest this update: Tue 11 Nov 2025 08:01:03 +0000
Manifest next update: Wed 12 Nov 2025 08:01:03 +0000
Files and hashes: 1: pmnxwhNwxE39EOKvaIyMTg6hKVU.crl (hash: BiwP4/GdXghwxxJZ/0Yvtt9DzPjB5DDtXoX9krRKu3E=)
2: vdy1MmzFMK60AlIdpOXD1htDYPg.roa (hash: 0u0pMl1wwd/at2uaTP4vwjKf36kzodMgLoxEXn0lwwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c1:6f:3c:dd:69:71:f5:13:d1:3e:55:a4:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
Validity
Not Before: Nov 11 08:01:03 2025 GMT
Not After : Nov 12 08:01:03 2025 GMT
Subject: CN=0e6a9da900e855c03c27d761e940c8aa7231b5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d9:76:4b:f9:e0:0c:91:32:85:c9:a2:10:ad:
4f:74:46:6e:e6:ab:b3:36:ff:4b:26:29:17:14:fd:
97:51:fc:96:84:0a:a0:29:8d:b0:c3:52:29:59:11:
d9:73:b6:e5:ea:e7:2d:76:eb:48:8c:9f:54:42:11:
08:45:11:3d:08:71:15:d1:3b:37:e6:c0:88:21:1a:
0a:95:c7:2e:cf:11:89:f5:1f:7c:39:63:45:f7:e0:
dd:d1:92:ac:21:61:f4:70:6b:9a:c5:38:d2:2f:93:
87:4c:d1:75:9e:fb:a4:87:8c:a0:ef:7b:38:eb:b0:
26:12:31:41:30:c2:7d:7e:88:df:9c:9d:41:09:2b:
4d:c8:d8:38:8b:eb:ed:49:82:eb:ea:4f:28:b1:36:
82:32:2b:43:43:3c:1e:2f:6c:b4:cd:8a:24:ae:ff:
4a:e1:c1:57:65:77:60:91:66:fa:ec:31:5e:66:1b:
22:34:ca:aa:f9:af:59:1b:a1:96:28:50:e9:5f:23:
a3:f9:eb:e0:29:53:ee:03:bc:60:f6:68:7c:87:4e:
bb:e1:92:03:d2:5d:93:a1:23:84:f5:c0:cd:35:90:
6f:15:d1:67:df:19:8b:7f:ec:71:93:1a:83:db:2d:
6f:16:b7:e7:69:8d:75:a4:6f:6b:16:e4:85:9e:ca:
b7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6A:9D:A9:00:E8:55:C0:3C:27:D7:61:E9:40:C8:AA:72:31:B5:B8
X509v3 Authority Key Identifier:
keyid:A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:92:45:11:d7:07:cd:0b:ae:54:ac:30:29:a1:21:f7:25:92:
63:73:bc:1e:79:bd:b1:ad:aa:67:48:1c:8c:05:67:d5:13:0f:
55:6f:b0:25:97:75:7c:ff:37:60:2d:f7:93:44:79:80:df:4c:
62:48:54:f1:0f:4d:5a:e2:b3:df:92:3f:a6:c2:cc:0f:d8:ca:
65:a6:f9:e9:e2:5d:d2:83:0f:b4:d0:14:36:c4:a4:31:c8:c8:
4c:d3:95:e9:0f:b3:79:0a:68:42:04:65:ec:70:82:95:88:35:
13:4d:15:56:f3:52:3b:4f:48:7c:6d:b2:c6:30:4d:e1:09:25:
57:b1:77:f9:cd:b0:25:37:d3:b9:ab:0f:1c:14:1e:cc:a6:06:
cc:cf:7a:59:0f:2f:d8:51:b4:12:9a:e2:47:b4:76:4e:1f:53:
60:1c:55:27:32:64:ff:e7:af:02:bb:28:b7:ee:49:7c:34:be:
6b:58:07:a0:56:73:d6:93:2e:e3:9e:69:48:ac:aa:3a:99:39:
dc:81:bf:26:b0:85:68:84:6f:fd:bf:ca:04:11:f0:1d:ce:6b:
df:ae:fa:18:a6:05:41:6f:ff:7b:22:67:81:1e:a4:95:47:b4:
90:3d:57:38:83:04:0f:c8:82:a9:cf:65:79:63:a6:cf:bd:7e:
70:68:bd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:45:11 2025 by rpki-client